Privacy Policy.

1. Who we are

BoulderWorld SARL, operating as "BoulderForest"

10 rue Jean Fischbach, L-3372 Leudelange, Luxembourg

Email: hello@boulderforest.lu · Phone: +352 20 20 33 20

We are the controller responsible for the processing of personal data described in this policy.

2. What data we collect and why

a) When you visit our website

Our hosting provider automatically processes technical data (IP address, browser type, date and time of access, pages visited) in server log files. This is necessary to deliver the website securely and reliably. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

b) When you use our contact or booking forms

When you send us a request through a form on this website (contact, birthday parties, private bookings, team events), we process the data you provide — such as your name, email address, phone number, preferred date, group size, and your message — to handle your request and prepare or perform a contract. Legal basis: contract performance (Art. 6(1)(b) GDPR) or legitimate interest in responding to your enquiry (Art. 6(1)(f) GDPR).

c) When you register, buy entries, or book courses

Registration, entries, memberships, and course bookings are handled through our booking platform Vertical Life (Vertical-Life S.r.l., Italy). When you create an account or make a purchase there, Vertical Life processes your data as described in its own privacy policy: https://www.vertical-life.info/privacy-policy. We receive from the platform the data necessary to manage your membership, entries, and course participation. Legal basis: contract performance (Art. 6(1)(b) GDPR).

d) When you email or call us

We process the contact details and content you share with us to handle your request. Legal basis: contract performance or legitimate interest.

e) When you subscribe to our newsletter

When you subscribe to our newsletter, we process your email address to send you BoulderForest news and updates. You can unsubscribe at any time using the unsubscribe link in our emails.

3. Hosting

This website is hosted by Webflow, Inc., 398 11th Street, San Francisco, CA 94103, USA. Webflow processes technical access data on our behalf under a data processing agreement. Transfers to the USA are safeguarded by the EU Standard Contractual Clauses and Webflow's certification under the EU–US Data Privacy Framework.

4. Cookies

This website only uses technically necessary cookies and similar technologies required to deliver the site. We do not use analytics, advertising, or tracking cookies. If this changes, we will update this policy and, where required, ask for your consent.

5. Links to third-party services

Our website contains links to external services — Google Maps (directions), Instagram, TikTok, and Facebook. We do not embed these services; no data is transferred to them by simply visiting our site. When you follow such a link, the respective provider's privacy policy applies.

6. How long we keep your data

We keep personal data only as long as necessary for the purposes described above or as required by law: enquiry data until the request is resolved, contract and booking data for the duration of the contractual relationship plus statutory retention periods (in particular under Luxembourg commercial and tax law, generally up to 10 years for accounting records).

7. Who we share data with

We share personal data only with the processors and partners named in this policy (hosting, booking platform), with professional advisers where necessary, and with authorities where legally required. We do not sell personal data.

8. Your rights

Under the GDPR you have the right to access, rectify, and erase your personal data, the right to restriction of processing, the right to data portability, and the right to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time with effect for the future.
To exercise your rights, contact us at hello@boulderforest.lu.

You also have the right to lodge a complaint with the supervisory authority:
Commission nationale pour la protection des données (CNPD)
15, Boulevard du Jazz, L-4370 Belvaux, Luxembourg · www.cnpd.lu

9. Changes to this policy

We may update this policy from time to time, for example when our website or services change. The current version is always available on this page.

Last update: 12.08.2026